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1. INTRODUCTION 

The need for content protection for digital medical images is growing, especially with the 
advancement of computerized systems and communication networks that enable high-quality images to be 
sent and received in real-time [1], [2]. Healthcare organizations must encrypt all patient data, such as 
photographs, before moving it over computer networks due to medical concerns. As a result, researching and 
improving certified encryption algorithms is crucial in modern medicine [3]. Medical image encryption techniques 
attempt to convert a digital image to a different image data format that is difficult to recognize [4]-[7]. 

It's difficult to overestimate the relevance of image security in the field of medical imaging. Several studies 
have been carried out to ensure the security of medical healthcare photographs [8]. Encryption is the best method for 
image confidentiality since it prevents data loss. Traditional encryption solutions cannot be directly applied to e-health 
data because of data size limits, redundancy, and capacity, especially when patient data is sent via open channels [9]. 
As a result, patients may lose the privacy of their data contents, as images differ from text due to their two distinct 
causes of data loss and confidentiality. Researchers have recognized similar security vulnerabilities and offered 
several picture encryption solutions to address the issue [10]-[12]. 

The volume of various medical images has recently exploded due to the emergence of new 
technology in medical sectors [13], [14], such as high-quality imaging instruments, fast and accurate 
computing systems, and dependable communication networks [15], [16]. Effective image encryption 
approaches for medical image content protection have become more significant, and there are currently 
several robust encryption algorithms available to secure both two-dimensional (2D) and three-dimensional 
(3D) medical images [17]-[19]. From a technological standpoint, the created technique can be divided into 
frequency domain encryption, and spatial domain encryption approaches, with low-level and high-level 
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methods for each [20], [21]. While the content of the image remains understandable and visible when using 
low-level image encryption algorithms, the image's content will be completely disordered, and the content of 
the original photos will be invisible when utilizing high-level image encryption techniques [22]. 

Healthcare organizations and hospitals should strike a balance between the benefits that the internet 
of medical things (loMT) offers and ensure that they have the necessary protocols and policies to address the 
security risks it poses [23], [24]. Consumer health monitory innovations such as the Nike Fuel band, Fit Bit, 
or Withings monitor an individual's health or a specific fitness regimen and connect to multiple mobile 
systems utilizing Bluetooth innovation are examples of IoMT [25], [26]. Figure 1 shows the encryption 
model for a medical image considered plain text; the sender and receiver agreed on the secret key and the 
encryption algorithm to encrypt the image to produce the cipher image. 


Secret key Encryption 
algorithm 


Plain image 


Cipher image 


Figure 1. Medical image and the corresponding encrypted image 


2. DATA COLLECTION PROCESS 

The researcher did a literature search to identify types of medical data encryption and the relevant 
challenges and concerns. The secondary sources that were deemed appropriate comprised books, articles, and 
periodicals that had content on medical data encryption and trust challenges and concerns. The researcher searched 
various articles from different databases lie Google Scholars, ERIC, EBSCOhost, and PubMed. The general search 
process used different keywords such as encryption, data, and medical images. Papers and articles were picked 
from the relevant search results as long as the respective article met the relevant inclusion criteria [27]. 

More specifically, the search approach used in various organization databases yielded roughly 
4450 records, which included traditional research studies as well as reports from other health organizations. 
Despite the fact that the search method made a considerable amount of data available, the data cleaning 
process was used to remove all relevant duplicates. After removing all duplicates, there were only 
2765 articles left. As a result, the abstracts and titles of these papers were scrutinized to see if they satisfied 
the other relevant inclusion criteria. As a result of the overall research methods and designs, more studies 
were omitted. The search results are depicted in the PRISMA research flowchart as shown in Figure 2 (see in 
appendix). 


3. SECURITY PRINCIPLES 

Medical image security is built on confidentiality, trustworthiness, privacy, authenticity, and 
integrity. Medical images in modern digital imaging systems are typically large in size and have a high level 
of redundancy [28], [29]. For intelligent healthcare and image cloud systems, real-time and resource- 
constrained security methods are required, and traditional algorithms cannot meet these requirements. As a 
result, a slew of new algorithms have arisen, all of which are examined [30]-[32]. Figure 3 presents the main 
five security principles that take on the encryption purpose. 


3.1. Confidentiality 

A storage or transmission application can be provided with confidentiality in two ways. For starters, 
the underlying computing architecture provides means for maintaining confidentiality. Complete 
transparency is a benefit. The obvious downside is that all programs are given confidentiality regardless of 
whether they are required or not. It is not feasible to utilize the unique qualities of specific applications. On 
the application layer, the second approach is to provide confidentiality. Only apps and services with a need 
for confidentiality are protected here [33]. 

The issue is that each application is responsible for its own confidentiality; the benefit is that unique 
properties of some apps may be used to build more efficient encryption schemes, or encryption can be 
disabled if it is not required [34]. The second type of encryption is selective encryption of medical picture 
data, which takes advantage of the redundancy of visual data [35]. 
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Confidentiality 


Authenticity 


Figure 2. Security principles 


3.2. Reliability 

Medical image dependability is a prerequisite for intelligent healthcare implementation. The security 
of the medical image cloud platform and the dependability of the image source are critical needs for image 
cloud systems, and they're a must-have for anyone building a cloud image system. As a result, to ensure the 
safe transmission and storage of images, the medical image security algorithm must have a strong anti-attack 
capability [36], [37]. 


3.3. Privacy 

The patient's privacy and personal information are involved in the medical image, which cannot be 
freely disclosed or stolen. It must not be abused or overused; otherwise, it would result in significant losses 
for the government and individuals and irreversible harm [38]. The necessity for privacy is an incredibly 
crucial part of medical image security, and it should be considered first while researching security algorithms [39]. 


3.5. Integrity 

There are usually many medical photographs for a patient or a disease scenario. Different 
information will be available at different phases of the diagnosis and therapy process. Medical images should 
be guaranteed to be comprehensive and dependable when they are transmitted and stored remotely. As a 
result, implementing multi-image fusion encryption and multiple information concealment in security 
techniques is essential [40]. 


4. RESULTS RELATED WORK 

A new solution for grayscale medical picture protection is proposed in [41], Genetic algorithms are 
based on their qualities. Several of the algorithm's processes (population, crossover, and mutation) are key- 
dependent, and the recurrence of crossover and mutation processes improves the algorithm's robustness. The 
results of the rigorous security analysis (correlation coefficient, entropy, NPCR, key sensitivity, MSE, and so 
on) demonstrate the robustness of the proposed method, indicating that the proposed scheme has a high order 
of security and can thus be used for real-time transmission of digital grayscale medical images. 

Çavuşoğlu et al. [42] introduced a novel secure image encryption technique based on a new chaos- 
based RNG and S-BOX structure. S-Box, one of the most fundamental components of block encryption 
methods, is used in the latest encryption technique. First and foremost, the new chaotic system is introduced, 
followed by analyses. Analyses of the system found that it had sufficiently complicated dynamic properties. 
NIST tests for random bit sequence of three phases from the RNG are performed after the chaotic system is 
placed into the RNG. An RNG design that produces bit series that meet all NIST standards is thought to be 
capable of generating random bits from an encryption method. Bit series from the x and z phases of the RNG 
are utilized to generate chaos-based S-BOX for use in encryption algorithm design and S-box generating 
algorithm. 

The encryption and decryption technique created here is used to encrypt and decrypt images. 
Encryption and decryption operations are done solely with chaos-based and AES algorithms to determine the 
security and performance level of the generated encryption algorithm. 

Banik et al. [43] proposed a novel elliptic curve equivalent of the ElGamal cryptosystem. The 
proposed algorithm encrypts any Cartesian space coordinate, constrained by positive modulo p. Multiple 
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pixel values were base converted and fed as Pm directly without expressing them as discrete Elliptic Curve 
coordinates, which aids in data expansion reduces the amount of elliptic curve mathematical operations. 
Furthermore, the discovery contributes to a significant increase in execution speed. 

The simple image's 512-bit hash value is used in [44] to generate one-time starting conditions for a 
four-wing complex chaotic system-based asymmetric color picture encryption scheme Three pairs of chaotic 
sequences are used to encrypt the pixels of the red, green, and blue components of the odd and even number 
indices. 

Dai et al. proposed in [45] a chaotic picture encryption approach based on bit-plane decomposition 
The ciphertext image is first split into an eight-bitmap, with the top four bits accounting for a significant 
amount of plain text. As a result, Arnold permutation on the high four-bit is used to correlate the time of 
permutation with the image order. After then, the scrambled images are combined to form a new scrambled 
image, which is then discussed. Henon maps are used to enhance the argument process. Henon mapping 
parameters were obtained by iterating the logistic map N times. Two Henon mapping sequences split two 
into four, which were then mixed into scrambled images and ciphertext images using the XOR technique. 

Mitra et al. [46] described a method for encrypting images using a random permutations mix; using 
a combination of several permutations approaches, this research proposes a simple-to-implement yet 
effective solution for image encryption. The primary notion is that the visual information in an image can be 
minimized by reducing the association between bits, pixels, and blocks using particular permutation 
techniques. 

The suggested method [47] uses a coupled map lattice to build an initial population of secure cipher- 
images for MGA. The MGA is then used to improve the entropy of the cipher-images while reducing the 
algorithm's computing time. Experiments and computer simulations show that the proposed solution, which 
uses a hybrid algorithm, provides excellent encryption and resists a variety of common assaults. 


5. EVALUATION METRICS 

Most of the previous research worked on maintaining the confidentiality of patient information and 
measuring this through various criteria to prove the ability to encrypt and decrypt medical images at high 
speed and without changing the content of the image, and accordingly, the following criteria were agreed 
upon. Color palette a color space is a collection of colors that has been organized in a specific way. It aids 
repeatable color representations, whether the model is an analog or digital image, when used in conjunction 
with color profiling enabled by various physical instruments. 

The time it takes for an encryption process to generate a ciphertext from plaintext is known as the 
encryption time. Encryption time is used to calculate an encryption technique's throughput. It refers to the 
speed with which data is encrypted. Entropy is defined in images as the equivalent states of intensity level to 
which individual pixels can adapt. The average uncertainty of the information source is interpreted as 
entropy, which is a measure of image information content. 


H(s) = ZZ P(s;) log, (1) 


1 
P(si) 


The correlation coefficient factor is used in security analysis to quantify the link between plaintext 
and encryption variables. As a result, the ciphertext must be distinct from the plaintext. 


Pry = cov(x,y) (2) 


Ox0y 
Table 1 shows the comparision among seven algorithms to encrypt medical images; most of the 


proposed algorithms used the Grayscale image. [41] introduced the fastest encryption time and excellent 
entropy value of 7.99. In the case of color images, the [44] shows a high-performance encryption time. 


Table 1. Evaluation metrics comparison 


Ref Color space Image size encryption time (s) Entropy correlation coefficient 
[41] Grayscale 512*512 00.35 7.99 0.00136 

[42] Grayscale 512*513 2.382 7.9559 0.531 

[43] grayscale 512*514 0.5 7.89 0.00116 

[44] RGB 512*515 5.9 7.9886 0.001197 

[45] grayscale 512*516 1.33 7.88 0.00012 

[46] grayscale 512*517 1.759 7.87 0.00133 

[47] grayscale 257 x 256 2.35 7.93 0.0097 
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6. FUTURE SCOPE 

Medical images are considered among the most sensitive and significant groups of data. Sharing 
medical images through the internet necessitates the application of a robust encryption scheme that is 
resistant to any form of attack. Several techniques of medical image encryption, such as watermarking and 
algorithm passwords, have been used widely in the clinical support system to protect medical images from 
unauthorized users. A comprehensive knowledge base and advanced functionalities are essential in designing 
efficient encryption methods for medical images. Despite the advanced knowledge on numerous encryption 
methods of medical images, strict security and confidentiality challenges and concerns are still linked to such 
data. For instance, hackers can still intrude on encrypted medical images and use such images without the 
patient's written permission. 

To achieve the maximum level of privacy and secrecy on medical data, the security and privacy 
problems related with encrypted medical images must be addressed permanently. To begin, it's critical to 
understand that data encryption employs a variety of technologies, protocols, and services to achieve a 
specific aim. To obtain the intended result, it is critical to establish a set of rules that must be followed at all 
stages of medical picture encryption, from the micro to the macro. The current criteria for medical picture 
encryption are a set of architecture standards that comprise interfaces, data models, and appropriate protocols 
that can handle a wider range of devices, humans, operating systems, and languages. This will prevent an 
unauthorized person from gaining access to all of the encrypted medical image data. Hackers can readily 
break most encryption methods, such as watermark and password algorithms, as previously stated. 

Second, identity management is required to address both the security and privacy issues associated 
with incorrect data utilization or encryption. Within the internet of things, identity management can be 
accomplished by attempting to share identifying pertinent information between devices for all first-time 
connections. Such a method is vulnerable to eavesdropping, which can result in a man-in-the-middle assault, 
jeopardizing the entire framework of medical picture encryption. As a result, there are some critical 
requirements for a form of preconfigured identity or hub management entity that can monitor the overall 
connection process of relevant devices using encryption and other relevant approaches to help prevent 
identity theft. 

The three-layer design of medical image encryption, according to most authors, never allows for the 
actual opening, closure, and adequate management of a session between the two items. As a result, protocols 
are desperately needed to handle all of these challenges and, eventually, to make communication between the 
essential devices easier. There is a pressing need for an abstract session layer to be included as an additional 
layer within encrypted data. 


7. CONCLUSION 

Medical photographs are among the most sensitive and important types of information. Sharing 
medical photos over the internet needs the use of a robust encryption technique that is impregnable to assault. 
Confidentiality is one of the most important aspects of any information security system, which includes 
availability, integrity, and confidentiality. Confidentiality is a critical feature of the secure sharing and 
storage of pertinent medical pictures. However, the most pressing challenge in achieving everlasting 
anonymity on medical photographs is security. If security considerations such as confidentiality, privacy, 
access control, authentication, end-to-end security, trust management, worldwide standards, and applicable 
policies are properly addressed, nearly anything in the healthcare sector, particularly medical imaging, can be 
transformed. New wireless identification, software, and hardware technologies are desperately needed to 
address all of the privacy and security issues that come with encrypted data. 
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